Checking The Configuration - Huawei Quidway S9300 Configuration Manual

Quidway S9300 Terabit Routing Switch
Configuration Guide - Security
l
----End

3.8.5 Checking the Configuration

Prerequisite
The configurations of the packet discarding alarm function are complete.
Procedure
l
Issue 06 (2010–01–08)
The system view is displayed.
2. Run:
dhcp snooping alarm threshold threshold
The alarm threshold of the number of globally discarded packets is set.
By default, the global alarm threshold of the number of discarded DHCP messages is
100 pps.
Configuring the packet discarding alarm function on an interface
1. Run:
system-view
The system view is displayed.
2. Run:
interface interface-type interface-number
The interface view is displayed.
3. Run:
dhcp snooping alarm { mac-address | user-bind | untrust-reply } enable
The packet discarding alarm function is enabled on the interface.
mac-address: If the MAC address in the packet header is different from the MAC
–
address of the DHCP message, the message is discarded.
user-bind: If the DHCP message does not match the binding table, the message
–
is discarded. The DHCP message refers to the DHCP Request message except for
the Discover message.
untrust-reply: If an untrusted interface receives a Reply message sent by the
–
DHCP server, the message is discarded.
By default, the packet discarding alarm function is disabled on an interface.
4. Run:
dhcp snooping alarm { mac-address | user-bind | untrust-reply } threshold
threshold
The alarm threshold of the number of discarded packets is set on the interface.
By default, an interface uses the threshold set in the dhcp snooping alarm
threshold command. If the command is not run in the system view, the interface uses
the default threshold, 100 pps.
Run the display dhcp snooping global command to check information about global DHCP
snooping.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
3 DHCP Snooping Configuration
3-29